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Amendments to the Claims : 

1. (Currently Amended) A system for authenticating a client comprising: 

an authenticator capable of sending, to the client, a set of at laaat one a plurality of labels 
identifying at l e ast on e a plurality of elements of an authentication matrix, the authentication 
matrix including a plurality of elements, each element capable of being identified by a label, 
wherein the authenticator is capable of receiving a passcode from the client fojmulated based 
| upon the at least - eae -elements identified by the received set of at - l e agt on e l abels, and wherein 
the authenticator is capable of authenticating the client based upon the formulated passcode. 

2. (Currently Amended) A system according to Claim 1, wherein the authenticator 
| is capable of sending a set of at l e ast one labels, receiving a formulated passcode and 

authenticating the client a plurality of times, and wherein the authenticator is capable of sending 
each set of at least one -labels such that the sent set of at lcasfr ei»e-labels differs from each 
previously sent set of at l e ast on e labels. 

3. (Currently Amended) A system according to Claim 1 , wherein the authenticator 
is capable of communicating with a passcode generator, wherein the passcode generator is 
capable of generating a passcode based upon at l e ast one elements selected from the 
authentication matrix, wherein the authenticator is capable of sending a set of ut lea s t on e ? labels 
identifying the selected at least one elements, and wherein the authenticator is capable of 
authenticating the client further based upon the generated passcode, 

4. (Currently Amended) A system according to Claim 3, wherein the authenticator 
includes a database capable of storing an authentication matrix, wherein the authenticator is 
capable of providing an authentication matrix to the client, wherein the passcode generator is 

| capable of generating a passcode based upon a t l e ast on e elements selected from the 
authentication matrix stored in the database, and wherein the authenticator is capable of 
receiving a passcode formulated based upon a^4e ast on e e lements of the authentication matrix 
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provided to the client corresponding to the at least one elements selected from the authentication 
matrix stored in the database. 

i 

5. (Currently Amended) A system according to Claim 1 4, wherein the database of the 

authenticator is capable of storing a plurality of authentication matrices, each authentication 

i 

matrix associated with a different client, wherein the authenticator is capable of providing, to the 

i 

client being authenticated, an authentication matrix associated witii the respective client, and 

wherein the passcode generator is capable of generating a passcode based upon nt - loa st-ene 

elements selected from the authentication matrix stored in the database and associated with the 

i 

respective client. j 

i 

6. (Currently Amended) A system according to Claim 5, wherein the authenticator 
is capable of receiving at least one piece of identifying infonnatiori associated with the client 
being authenticated, and thereafter identifying, from the plurality cff authentication matrices 
stored in the database, the authentication matrix associated with the client being authenticated 
based upon the at least one piece of identifying information, and wherein the passcode generator 
is capable of generating a passcode based upon at least one e lements selected from the identified 

authentication matrix. ; 

i 
i 

7. (Original) A system according to Claim 3, wherein, the passcode generator is 
capable of generating a passcode further based upon a personal identification number (PIN) 
associated with the client, and wherein the authenticator is capable! of receiving a passcode 
formulated further based upon the PIN. i 

8. (Currently Amended) A system according to Claim 7, wherein the passcode 
generator is capable of generating a passcode including at least on e elements selected from the 
authentication matrix and the PIN in a predefined variable p osition with respect to the selected at 
least one? e lements, wherein the authenticator is capable of receiving a passcode formulated to 
include the identified at l e ast one elements and the PIN in the predefined variable p osition with 

3 of 26 

! 

PAGE 6/29 * RCVD AT 2/14/2006 3:20:38 PM [Eastern Standard Time] * SVR:USPTO-EFXRF-6/38 * DNISOTOO 1 CSID:7044441 1 11 * DURATION (mm-ss):07-16 



BEST AVAILABLE COPY 



02/14/2006 15:23 FAX 7044441111 



ALSTON BIRD LLP 



© 007 



Appl.No/. 10/808,166 
Filed: March 24, 2004 
Amdt. dated 02/14/2006 

j respect to the identified atlaast one elements, and wherein the authenticator is capable of 
authenticating the client by identifying a match between the generated passcode and the 
formulated passcode. 

9. (Currently Amended) A system comprising: 

a client capable of receiving a set of al4efl£rt*»fte a plurality of labels identifying at l e ast 
e ^a plurality of elements of an authentication matrix, the authentication matrix including a 
plurality of elements, each element capable of being identified by a label, wherein the client is 
capable of formulating a passcode based upon the at least on e-elements identified by the received 
set of at Toast one labels such that the client is capable of being authenticated based upon the 
formulated passcode. 

1 0. (Currently Amended) A system according to Claim 9, wherein the client is 

| capable of receiving the set of at l e ast oa e-labels and formulating a passcode a plurality of times 
such that the client is capable of being authenticated a plurality of times 3 and wherein each set of 

| at least one labels received by the client differs from each set of at l e ast one -labels previously 
received by the client. 

1 1 . (Currently Amended) A system according to Claim 9, wherein the client is 

| capable of receiving a set of at l e ast on e-labels identifying at l e ast on e elements selected from the 
authentication matrix during generation of a passcode, and wherein the client is capable of 
formulating the passcode such that the client is capable of being authenticated further based upon 
the generated passcode. 

12. (Currently Amended) A system according to Claim 1 1 , wherein the client is 
capable of being provided with an authentication matrix from an authenticator capable of storing 
an authentication matrix, wherein the client is capable of receiving a set of at- [east one l abels 
identifying at-leas4^ne-elements selected from the authentication matrix stored by the 
authenticator, and wherein the client is capable of formulating a passcode based upon at least one 
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elements of the authentication matrix provided to the client corresponding to the ai least on e 
elements selected from the authentication matrix stored by the authenticator. 

13. (Currently Amended) A system according to Claim 12, wherein the client is 
capable of being provided with an authentication matrix associated with the respective client 
from an authenticator capable of storing a plurality of authentication matrices, each 
authentication matrix associated with a different client, and wherein the client is capable of 
| receiving a set of at l e ast on e l abels identifying at least one-elements selected from the 
authentication matrix stored by the authenticator and associated with the respective client. 

] 4. (Currently Amended) A system according to Claim 13, wherein the client is 
capable of sending the authenticator at least one piece of identifying information associated with 
the respective client such that the authenticator is capable of identifying, from the plurality of 
authentication matrices, the authentication matrix associated with the respective client based 
upon the at least one piece of identifying information, and wherein the client is capable of 
receiving a set of at lea s t one l abels identifying at l e ast one elements selected from the identified 
authentication matrix. 

1 5. (Currently Amended) A system according to Claim 1 1, wherein the client is 

| capable of receiving a set of Qt-lea s t one labels identifying at least one elemen ts selected from the 
authentication matrix during generation of a passcode based upon a personal identification 
number (PIN) associated with the client, and wherein the client is capable of formulating a 
passcode further based upon the PIN. 

1 6, (Currently Amended) A System according to Claim 1 5, wherein the client is 
capable of receiving a set of at l e asl on e labels identifying at laaot one elements selected from the 
authentication matrix during generation of a passcode including at l e ast -^ a e-elements selected 
from the authentication matrix and the PIN in a -predefined variable_p osition with respect to the 
selected at least on a-elements, wherein the client is capable of formulating a passcode including 
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the identified at loasl one elements and the PIN in the predefined variable p osition with respect to 
the identified at least on e elements such that the client is capable of being authenticated by 
identifying a match between the generated passcode and the formulated passcode. 

1 7. (Currently Amended) A method of authenticating a client comprising: 
receiving a set of at least one a plurality of labels identifying at l e ast on ea plurality of 

elements of an authentication matrix, the authentication matrix including a plurality of elements, 
each element capable of being identified by a label; 

formulating a passcode based upon the at least one elements identified by the received set 
of at - lcQSt one labels; and 

authenticating the client based upon the formulated passcode. 

1 8. (Currently Amended) A method according to Claim 17, wherein receiving a set 
of at least one labels, formulating a passcode and authenticating the client occur a plurality of 
times, and wherein each received set of at least one labels differs from each previously received 
set of a*4«as t H g H*6-labels. 

19. (Currently Amended) A method according to Claim 17 further comprising: 

j generating a passcode based upon ot least ono -elements selected from the authentication 

matrix, 

wherein receiving a set of at l e ast one l abels comprises receiving a set of at least one 
labels identifying the selected at least one elements, and 

wherein authenticating the client comprises authenticating the client fitrther based upon 
the generated passcode. 

20. (Currently Amended) A method according to Claim 19 further comprising: 
providing an authentication matrix to an authenticator, and providing an authentication 

matrix to the client, 
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wherein generating a passcode comprises generating a passcode based upon at least one 
elements selected from the authentication matrix provided to the authenticator., and 

wherein formulating a passcode comprises formulating a passcode based upon at least 
ene-elements of the authentication matrix provided, to the client corresponding to the at l e ast on e 
elements selected from the authentication matrix provided to the authenticator. 

21 . (Currently Amended) A method according to Claim 20, wherein providing an 
authentication matrix to an authenticator comprises providing a plurality of authentication 
matrices to an authenticator, each authentication matrix associated with a different client, 
wherein providing an authentication matrix to the client comprises providing, to the client being 
authenticated, an authentication matrix associated with the respective client, and 

wherein generating a passcode comprises generating a passcode based upon at4 e ast on e 
elements selected from the authentication matrix provided to the authenticator and associated 
with the respective client. 

22. (Currently Amended) A method according to Claim 21 further comprising: 
receiving at least one piece of identifying information associated with the client being 

authenticated; and 

identifying, from the plurality of authentication matrices, the authentication matrix 
associated with the client being authenticated based upon the at least one piece of identifying 
information, 

wherein generating a passcode comprises generating a passcode based upon at l e apt on e 
elements selected from the identified authentication matrix. 

23. (Original) A method according to Claim 19, wherein generating a passcode 
comprises generating a passcode further based upon a personal identification number (PIN) 
associated with the client, and wherein formulating a passcode comprises formulating a passcode 
further based upon the PIN. 
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24. (Currently Amended) A method according to Claim 23, wherein generating a 
passcode comprises generating a passcode including at least on e elements selected from the 
authentication matrix and the PIN in a pg o 4 ofincd v ariable p osition with respect to the selected at 
least on e elements, wherein formulating a passcode comprises formulating a passcode including 
the identified at least one elements and the PIN in the pred e fined variable p osition with respect to 
the identified at least one elements, and wherein authenticating the client comprises identifying a 
match between the generated passcode and the formulated passcode. 

25. (Currently Amended) A computer program product for authenticating a client, 
the computer program product comprising at least one computer-readable storage medium 
having computer-readable program code portions stored therein, the computer-readable program 
code portions comprising: 

a first executable portion for receiving a set of at least one a plurality o flabels identifying 
a t least one a plurality of elements of an authentication matrix, the authentication matrix 
including a plurality of elements, each element capable of being identified by a label; 

a second executable portion for formulating a passcode based upon the a^4east-ene 
elements identified by the received set of at least one l abels; and ' 

a third executable portion for authenticating the client based upon the formulated 
passcode. 

26. (Currently Amended) A computer program product according to Claim 25, 
wherein the first, second and third executable portions axe adapted to receive a set of at least on e 
labels, formulate a passcode and authenticate the client, respectively, a plurality of times, and 
wherein each set of at least one labels received by the first executable portion differs from each 

set of ftt4east-ee©-labels previously received by the: first executable portion. 

: i 

: i 

27. (Currently Amended) A computer program product according to Claim 25 further 
comprising: 
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a fourth executable portion for generating a passcode based upon at least ooo elements 
selected from the authentication matrix, 

wherein the first executable portion is adapted to receive a set of at leu stone labels 
identifying the selected at l e ast on e elements, and 

wherein the third executable portion is adapted to authenticate the client further based 
upon the generated passcode* 

28. (Currently Amended) A computer program product according to Claim 27 further 
comprising: 

a fifth executable portion for providing an authentication matrix to an authenticate*, and 
providing an authentication matrix to the client, 

wherein the fourth executable portion is adapted to generate a passcode based upon at 
leapt one elements selected from the authentication matrix provided to the auihenticator, and 

wherein the second executable portion is adapted to formulate a passcode based upon at 
l e ast ono elements of the authentication matrix provided to the client corresponding to the at least 
eae-elements selected from the authentication matrix provided to the authenticator. 

29. (Currently Amended) A computer program product according to Claim 28, 
wherein the fifth executable portion is adapted to provide a plurality of authentication matrices to 
the authenticated, each authentication matrix associated with a different client, wherein the fifth 
executable portion is also adapted to provide, to the client being authenticated, an authentication 
matrix associated with the respective client, and 

wherein the fourth executable portion is adapted to generate a passcode based upon at 
least on e elements selected from the authentication matrix provided to the auihenticator and 
associated with the respective client. 

30. (Currently Amended) A computer program product according to Claim 29 further 
comprising: 
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a sixth executable portion for receiving at least one piece of identifying information 
associated with the client being authenticated; and 1 

a seventh executable portion for identifying, from the plurality of authentication matrices, 
the authentication matrix associated with the client! being authenticated based upon the at least 
one piece of identifying information, 

wherein the fourth executable portion is adapted to generate a passcode based upon at 
least one elements selected from the identified authentication matrix. 

31. (Original) A computer program product according to Claim 27, wherein the 

fourth executable portion is adapted to generate a passcode further based upon a personal 

i 

identification number (PIN) associated with the clifent, and wherein the second executable 
portion is adapted to formulate a passcode further based upon the PIN. 

32. (Currently Amended) A computer program product according to Claim 31, 
wherein the fourth executable portion is adapted to generate a passcode including at toast ono 
elements selected from the authentication matrix and the PIN in a pred e fined variable p osition 
with respect to the selected at leas t one elements, wherein the second executable portion is 
adapted to formulate a passcode including the identified a t least one elements and the PIN in the 

predefined variable p osition with respect to the identified at least one elements, and wherein the 

i 

third executable portion is adapted to authenticate the client by identifying a match between the 
generated passcode and the formulated passcode. : 

33. (Currently Amended) A system comprising: 

an entity capable of sending, to a client, a set of at least on e a plurality of labels 
identifying at least onc a plurality of elements of a matrix, the matrix including a plurality of 
elements, each element capable of being identified; by a label, and wherein tb^ entity is capable 
of receiving a response from the client formulated based upon the at least on e -elements identified 
by the received set of at l e ast on e labels. 
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34. (Currently Amended) A system according to Claim 33, wherein the entity is 
capable of sending a set of at least on e labels, and receiving a formulated response a plurality of 
times, and wherein the entity is capable of sendingjeach set of al least one labels such that the 
sent set of at least one labels differs from each previously sent set of a*4e&st-efie-labels. 

i 
i 

i 

35. (Original) A system according to C,laim 33, wherein the entity comprises an 
authenticator and the matrix comprises an authentication matrix, wherein the authenticator is 
capable of receiving a response comprising a passqode, and wherein the authenticator is capable 

of authenticating the client based upon the formulated passcode, 

| 

36. (Currently Amended) A system according to Claim 35, wherein the authenticator 
is capable of communicating with a passcode generator, wherein the passcodc generator is 
capable of generating a passcode based upon at least ono elements selected from the 
authentication matrix, wherein the authenticator isjcapable of sending a set of at least one labels 
identifying the selected a fr lcast one elements, and wherein the authenticator is capable of 
authenticating the client further based upon the generated passcode. 

! 
i 
I 
i 

37. (Currently Amended) A system according to Claim 36, wherein the authenticator 
includes a database capable of storing an authentication matrix, wherein the authenticator is 
capable of providing an authentication matrix to the client, wherein the passcode generator is 
capable of generating a passcode based upon at least on e elements selected from the 
authentication matrix stored in the database, and wherein the authenticator is capable of 
receiving a passcode formulated based upon at lenst one elements of the authentication matrix 
provided to the client corresponding to the at- l e ast - on e-elements selected from the authentication 
matrix stored in the database. 



38. (Currently Amended) A system according to Claim 37, wherein the database of 

! 

the authenticator is capable of storing a plurality of authentication matrices, each authentication 
matrix associated with a different client, wherein the authenticator is capable of providing, to the 
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client being authenticated, an authentication matrix associated with the respective client, and 
wherein the passcode generator is capable of generating a passcode based upon at ) e a$t on e 
elements selected from the authentication matrix stjored in the database and associated with the 
respective client. ] 



39. (Currently Amended) A system according to Claim 38, wherein the authenticator 
is capable of receiving at least one piece of identifying information associated with tbe client 
being authenticated, and thereafter identifying, from the plurality of authentication matrices 
stored in the database, the authentication matrix associated with the client being authenticated 

i 

based upon the at least one piece of identifying information, and wherein the passcode generator 
is capable of generating a passcode based upon at lpast ono elements selected from the identified 

authentication matrix. ! 

j 

i 

40. (Original) A system according to dlaim 36, wherein the passcode generator is 
capable of generating a passcode further based upojn a personal identification number (PIN) 
associated with the client, and wherein the authenticator is capable of receiving a passcode 
formulated further based upon the PIN. 



41 . (Currently Amended) A system according to Claim 40, wherein the passcode 
generator is capable of generating a passcode inclu'ding at4east-efie-eleinents selected from the 
authentication matrix and the PIN in a predefined V ariable p osition with respect to the selected at 



lea-st one elements, wherein the authenticator is capable of receiving a passcode formulated to 

PIN in the pred e fin e d variiblc p osition with 



include the identified at least one elements and the 



authenticating the client by identifying a match between the generated passcode and the 



respect to the identified at least one elements, and wherein the authenticator is capable of 
authenticating the clit 

formulated passcode. I 

i 

42. (Currently Amended) A system comprising: 
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a client capable of receiving a set of Lit l e ust one a plurality of labels identifying at l e ast 
ene a plurality of elements of a matrix, the matrix including a plurality of elements, each element 
capable of being identified by a label, wherein the client is capable of formulating a response 
based upon the at l e ast on e elements identified by the received set of at4eas^ *e-labels. 



43. (Currently Amended) A system according to Claim 42, wherein the client is 
capable of receiving the set of at least one labels arid fonnulating a response a plurality of times, 
and wherein each set of at least on e l abels received by the client differs from each set of ai l e ast 
one-labels previously received by the client. 

44. (Currently Amended) A system according to Claim 42, wherein the client is 
capable of receiving the set of at least one labels identifying at least on e elements of an 
authentication matrix, and wherein the client is capjable of formulating a response comprising a 
passcode such that the client is capable of being authenticated based upon the formulated 
passcode. 

45. (Currently Amended) A system according to Claim 12, wherein the client is 
capable of receiving a set of at least on e labels identifying at l e ast on e elements selected from the 
authentication matrix during generation of a passcode, and wherein the client is capable of 
formulating the passcode such that the client is capable of being authenticated further based upon 
the generated passcode. 

46. (Currently Amended) A system according to Claim 45, wherein the client is 
capable of being provided with an authentication matrix from an authenticator capable of storing 
an authentication matrix, wherein the client is capable of receiving a set of at- [oast on e l abels 

i ; 

identifying at least one elements selected from the jauthentication matrix stored by the 
authenticator, and wherein the client is capable of formulating a passcode based upon nt least one 
elements of the authentication matrix provided to the client corresponding to the at leoat one 
elements selected from the authentication matrix stored by the authenticator. 
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47. (Currently Amended) A system according to Claim 46, wherein the client is 
capable of being provided with an authentication matrix associated with the respective client 
from an authenticator capable of storing a pluralityjof authentication matrices, each 
authentication matrix associated with a different client, and wherein the client is capable of 
receiving a set of at l e ast on e l abels identifying at least one elements selected from the 
authentication matrix stored by the authenticator and associated with the respective client. 

48. (Currently Amended) A system according to Claim 47, wherein the client is 
capable of sending the authenticator at least one piece of identifying information associated with 
the respective client such that the authenticator is cjapable of identifying, from the plurality of 
authentication matrices, the authentication matrix Associated with the respective client based 
upon the at least one piece of identifying information, and wherein the client is capable of 
receiving a set of a*4east«eae-labels identifying at l je ost on e elements selected from the identified 
authentication matrix. 



49. (Currently Amended) A system according to Claim 45, wherein the client is 
capable of receiving a set of a£4east-e»e4abels identifying at least one elements selected from the 
authentication matrix during generation of a passcode based upon a personal identification 
number (PIN) associated with the client, and wherein the client is capable of formulating a 
passcode further based upon the PIN. 

50. (Currently Amended) A system according to Claim 49, wherein the client is 
capable of receiving a set of at- tea s t -a a e-labels identifying at-least-eae-elements selected from the 
authentication matrix during generation of a passcode including at least one elements selected 
from the authentication matrix and the PTN in a predefined variable p osition with respect to the 
selected at least one elements, wherein the client i$i capable of formulating a passcode including 
the identified at least one elements and the PIN in the prcdofined variable p osition with respect to 
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the identified at bast asfr-elements such that the client is capable of being authenticated by 
identifying a match between the generated passcode and the formulated passcode. 



51. (Currently Amended) A method comprising: 



receiving a set of t 



plurality of labels identifying i 



y? ea plurality of 



elements of a matrix, the matrix including a plurality of elements, each element capable of being 
identified by a label; and 

formulating a response based upon the i 
of at-l^ftsfc-efie-labels. 



elements identified by the received set 



52. (Currently Amended) A method according to Claim 51, wherdn receiving a set 
hlabels and formulating a response occur a plurality of times, and wherein each 



received set of at loaot one labels differs from each 



previously received set of at bast one labels. 



53. (Currently Amended) A method according to Claim 51, wherein receiving a set 
of at l e ast on e l abels comprises receiving a set of at l e ast on e labels identifying at least on e 
elements of an authentication matrix, wherein formulating a response comprises formulating a 
passcode, and wherein the method further comprises: 

authenticating the client based upon the formulated passcode. 



54. (Currently Amended) A method according to Claim 53 further comprising: 
generating a passcode based upon at l e ast tin e elements selected from the authentication 



matrix, 

wherein receiving a set of at l e ast oa e-labcls comprises receiving a sei of at l e ast on e 
labels identifying the selected at boat one elements, and 

wherein authenticating the client comprises authenticating the client further based upon 
the generated passcode. 

55, (Currently Amended) A method according to Claim 54 further comprising: 
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providing an authentication matrix to an authenticator, and providing an authentication 
matrix to the client, 

wherein generating a passcode comprises generating a passcode based upon at l e ast on e 
elements selected from the authentication matrix provided to the authenticate^ and 

wherein formulating a passcode comprises formulating a passcode based upon at l e agt 
ewe-elements of the authentication matrix provided to the client corresponding to the at least ^a e 
elements selected from the authentication matrix provided to the authenticator, 

56. (Currently Amended) A method according to Claim 55, wherein providing an 
authentication matrix to an authenticator comprises providing a plurality of authentication 
matrices to an authenticator, each authentication matrix associated with a different client, 
wherein providing an authentication matrix to the client comprises providing, to the client being 
authenticated, an authentication matrix associated with the respective client, aod 

wherein generating a passcode comprises generating a passcode based upon at least on e 
elements selected from the authentication matrix provided to the authenticator and associated 
with the respective client, 

57. (Currently Amended) A method according to Claim 56 further comprising: 
receiving at least one piece of identifying information associated with the client being 

authenticated; and 

identifying, from the plurality of authentication matrices, the authentication matrix 
associated with the client being authenticated based upon the at least one piece of identifying 
information, 

wherein generating a passcode comprises generating a passcode based upon at least on e 
elements selected from the identified authentication matrix. 

58. (Original) A method according to Claim 54, wherein generating a passcode 
comprises generating a passcode further based upon a personal identification number (PIN) 
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associated with the client, and wherein formulating a passcode comprises formulating a passcode 
further based upon the PIN. 

59. (Currently Amended) A method according to Claim 58, wherein generating a 
passcode comprises generating a passcode including at least one elements selected from the 
authentication matrix and the PIN in a pr e d e fin e d variable p osition with respect to the selected at 
least one elements, wherein formulating a passcode comprises formulating a passcode including 
the identified 3fe4easfreBe^elements and the PIN in the pred e fin e d v ariable p osition with respect to 
the identified atlonst one e lements, and wherein authenticating the client comprises identifying a 
match between the generated passcode and the formulated passcode. 

60. (New) A system according to Claim 1 , wherein the authenticator is capable of 
sending a set of labels to the client in response to the client effectuating logging in, logging in 
including prompting the client for at least one piece of identifying information, and receiving the 
at least one piece of identifying information from the client, the at least one piece of identifying 
information comprising a user name and a password associated with a client user. 

6 1 . (New) A system according to Claim 6, wherein the at least one piece of 
identifying information received by the authenticator is capable of identifying the client to an 
organization independent of the authentication matrix associated with the client. 

62. (New) A system according to Claim 9, wherein the client is capable of receiving 
a set of labels in response to the client effectuating logging in, logging in including the client 
being prompted for at least one piece of identifying information, and sending the at least one 
piece of identifying information, the at least one piece of identifying information comprising a 
user name and a password associated with a client user. 
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i 



63. (New) A system according to Cjlaim 14, wherein the at least one piece of 
identifying information sent by the client is capable of identifying the client to an organization 
independent of the authentication matrix associated with the respective client. 



i 



64. (New) A method according to <plaim 1 7, wherein receiving a set of labels 
comprises receiving a set of labels in response [to effectuating logging in, logging in including 
prompting the client for at least one piece of identifying information, and sending the at least one 

piece of identifying information, the at least orie piece of identifying information comprising a 

i 

user name and a password associated with a client user, 

| 

i 

65. (New) A method according to fclaim 22, wherein receiving at least one piece of 
identifying information comprises receiving atjleast one piece of identifying information capable 
of identifying the client to an organization independent of the authentication matrix associated 

with the client. j 

i 
i 

66. (New) A computer program product according to Claim 25> wherein the first 
executable portion is adapted to receive a set ojf labels in response to effectuaiing logging in, 
logging in including prompting the client for at least one piece of identifying information, and 

sending the at least one piece of identifying information, the at least one piece of identifying 

ii 

information comprising a user name and a password associated with a client user. 

i 

67. (New) A computer program product according to Claim 30, wherein the at least 
one piece of identifying information received i>y the sixth executable portion is capable of 
identifying the client to an organization independent of the authentication matrix associated with 
the client. 



68. (New) A system according to Claim 33, wherein the entity is capable of sending 
a set of labels to the client in response to effectuating logging in, logging in including prompting 
the client for at least one piece of identifying information, and receiving the at least one piece of 
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identifying information, the at least one piece of identifying information comprising a user name 

! 

and a password associated with a client user. ' 



69. (New) A system according to Claim 39, wherein the at least one piece of 
identifying information received by the authenjicator is capable of identifying the client to an 
organization independent of the authentication matrix associated with the client. 



70. (New) A system according to Claim 42, wherein the client is capable of receiving 
a set of labels in response to effectuating logging in, logging in including the client being 
prompted for at least one piece of identifying information, and sending the at least one piece of 
identifying information, the at least one piece of identifying information comprising a user name 
and a password associated with a client user, j 



71. (New) A system according to 
identifying information sent by the client is 
independent of the authentication matrix 



Claim 48, wherein the at least one piece of 
capable of identifying the client to an organization 
associated with the respective client. 



72. (New) A method according to Claim 51, wherein receiving a set of labels 
comprises receiving a set of labels in response to effectuating logging in, logging in including 
prompting the client for at least one piece of identifying information, and sending the at least one 
piece of identifying information, the at least one piece of identifying informal ion comprising a 
user name and a password associated with a client user. 



73. (New) A method according to Claim 57, wherein receiving at least one piece of 



identifying information comprises receiving at 



least one piece of identifying information capable 



of identifying the client to an organization independent of the authentication matrix associated 
with the client. 



74. (New) A system for authenticating a user comprising: 
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an entity capable of prompting a user for at least one piece of identifying information 

! 

associated with the user, the user being prompted during effectuation of logging in, 

wherein the entity i$ capable of receiving the identifying information in response to 

prompting the user, wherein the entity receiving of the identifying information invokes an 

authentication procedure, the authentication procedikre comprising: 

selecting a set of labels identifying elements of an authentication matrix, wherein 
the authentication matrix includes a plurality of elements that are each identified by a 
label; 

providing the selected set of labels to the user, the set of selected labels being 
unknown to the user until the set is provided; 

receiving a passcode from the user iii response to providing the set of labels, the 
passcode having been formulated based upon the elements identified by the provided set 
of labels; and i 

authenticating the user based upon the received passcode. 

75. (New) A system according to Claim 74, wherein the entity is capable of 
prompting the user and receiving the identifying information for each of a plurality of instances 
of logging in, and wherein the entity receiving of the identifying information for each instance 
invokes the authentication procedure such that the set of labels provided for the respective 
instance differs between the set of labels provided for each previous instance. 

76. (New) A system according to Claim 75, wherein the entity receiving of the 
identifying information for each instance invokes the authentication procedure such that the 
received passcode is unique to the respective instance. 

i 

! 

77. (New) A system according to Claini 74, wherein the entity is capable of receiving 
at least one piece of identifying information such that the authentication procedure further 
comprises: 
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! 1 

identifying, from the plurality of authentication matrices, the authentication matrix 
associated with the client being authenticated basedjupon the at least one piece of identifying 
information, the selected set of labels identifying elements of the identified authentication 



matrix. 



78. (New) A system according to Claim) 77, wherein the at least one piece of 
identifying information received by the entity is capable of identifying the client to an 
organization independent of the authentication matrix associated with the client. 



79. (New) A system according to Claim! 74, wherein tie entity is capable of receiving 

at least one piece of identifying information such th^t the authentication procedure includes 

receiving a passcode having been formulated further based upon a personal identification number 

(PIN) associated with the client. ! > 

i 

i 

80. (New) A system according to Claim 79, wherein the entity is capable of receiving 
at least one piece of identifying information such thlat the authentication procedure includes 

i ] 

receiving a passcode having been formulated including at least onb element solected from the 
authentication matrix and the PIN in a predefined pbsition with respect to the selected at least 

one element. j > 

| [ 

8 1 . (New) A system according to Claim 74, wherein the identifying information 

i i 

received by the entity comprises a user name and a password associated with the user. 

: i 

82. (New) A method for authenticating £ user comprising: 

prompting a user for at least one piece of identifying information associated with the 
user, the user being prompted during effectuation of logging in; and 

receiving the identifying information in response to prompting the user, wherein 
receiving of the identifying information invokes an authentication procedure, the authentication 
procedure comprising: 
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selecting a set of labels identifying elements of an authentication matrix, wherein 
the authentication matrix includes a plurality of elements that are each identified by a 

label; j 

providing the selected set of labels to the user, the s!et of selected labels being 

unknown to the user until the set is provided; | 

receiving a passcode from the user in response to providing the set of labels, the 
passcode having been formulated based upon the elements identified by the provided set 
of labels; and 

authenticating the user based upon the received passcode. 

i 

83 . (New) A method according to Claim 82, wherein prompting tl ie user and 
receiving the identifying information occur for each of a plurality pf instances of logging in, and 
wherein the receiving of the identifying information for each instance invokes the authentication 
procedure such that the set of labels provided for the respective instance differs between the set 
of labels provided for each previous instance. 

84. (New) A method according to Claim 83, wherein the receiving of the identifying 
information for each instance invokes the authentication procedork such that ihe received 

i 

passcode is unique to the respective instance. ] 

i 

85. (New) A method according to Claim 82, wherein receiving at least one piece of 
identifying information comprises receiving at least one piece of identifying information such 
that the authentication procedure further comprises: J 

identifying, from the plurality of authentication matrices, the authentication matrix 
associated with the client being authenticated based upon the at lejast one piece of identifying 
information, the selected set of labels identifying elements of the identified airthentication 
matrix. 
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86. (New) A method according to Claim 85, wherein the received at least one piece 
of identifying information is capable of identifying the client to an organization independent of 
the authentication matrix associated with the client. 

I 

87. (New) A method according to Claim 82, wherein receiving at least one piece of 
identifying information comprises receiving at least one piece of identifying ii formation at least 
one piece of identifying information such that the authentication procedure includes receiving a 
passcode having been formulated further based upon a personal identification number (PIN) 
associated with the client. 

88. (New) A method according to Claim 87, wherein ijeceiviug at least one piece of 
identifying information comprises receiving at least one piece of identifying information such 
that the authentication procedure includes receiving a passcode having been formulated 
including at least one element selected from the authentication rnajtrix and the PIN in a 
predefined position with respect to the selected at least one element. 



89. (New) A method according to Claim 82, wherein prompting a user comprises 
prompting a user for identifying information comprising a user napie and a password associated 
with the user. 

90. (New) A computer program product for authenticating a useT, the computer 
program product comprising at least one computer-readable storage medium having computer- 
readable program code portions stored therein, the computer-readable program code portions 
comprising: 

a first executable portion for prompting a user for at least one piece of identifying 
information associated with the user, the user being prompted during effectuation of logging in; 
and 
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a second executable portion for receiving the identifying information in response to 
prompting the user, wherein the second executable portion receiving of the identifying 
information invokes an authentication procedure, the authentication procedure comprising: 

selecting a set of labels identifying elements of an authentication matrix, wherein 

i 

the authentication matrix includes a plurality of elements that are each identified by a 
label; 

providing the selected set of labels to the user, the set of selected labels being 
unknown to the user until the set is provided; 

, i 

receiving a passcode from the user iii response to providing the set of labels, the 
passcode having been formulated based upon the elements i 
of labels; and 

authenticating the user based upontiie received passcode. 



identified by the provided set 



91 . (New) A computer program product according to Claim 90, wherein the first and 
second executable portions are adapted to prompt the user and receive the identifying 
information for each of a plurality of instances of Jogging in, and jvherein the second executable 
portion receiving of the identifying information forjeach instance invokes the authentication 
procedure such that the set of labels provided for the respective instance differs between the set 
of labels provided for each previous instance. 



[ 



92, (New) A computer program product according to Claim 91, wherein the second 
executable portion receiving of the identifying infoimation for each instance invokes the 
authentication procedure such that the received passcode is unique to the respective instance. 

93. (New) A computer program product according to Claim 90, wherein the second 
executable portion is adapted to receive at least one! piece of identifying information such that the 
authentication procedure further comprises: j 

identifying, from the plurality of authentication matrices, the authentication matrix 
associated with the client being authenticated based upon the at least one piec e of identifying 
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information, the selected set of labels identifying elements of the identified authentication 
matrix. 1 J 

94. (New) A computer program product' according to Claim 93, wherein the at least 
one piece of identifying information received by the second executable portion is capable of 
identifying the client to an organization independent of the authentication matrix associated with 
the client. ; 

, i 

95. (New) A computer program product according to Claim 90, wherein the second 
executable portion is adapted to receive at least one piece of identifying information such that the 
authentication procedure includes receiving a passcbde having been formulated further based 
upon a personal identification number (PIN) associated with the client 



96. (New) A computer program product according to Claim 95, wherein the second 

ing information such that the 

authentication procedure includes receiving a passcbde having been formulated including at least 
one element selected from the authentication matifr; and the PIN iti a predefined position with 
respect to the selected at least one element. 

97, (New) A computer program product according to Claim 90, wherein the first 
executable portion is adapted to prompt a user for identifying information comprising a user 
name and a password associated with the user. 
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